I used wireshark to compare
curl --tlsv1.0 vs
The server handshake obediently uses TLSv1.0 for servers that support it (the point is to check to validate they don't):
wget url --no-check-certificate --secure-protocol=TLSv1 behaves the same as --secure-protocol=TLSv1_2: the handshake uses TLS1_2 every time.
Obviously there is no
--secure-protocol=TLS1_0. How do I force wget to obey using 1_0 not 1_2?
wget: --secure-protocol: Invalid value ‘TLSv1_0’
GNU Wget 1.17.1 built on cygwin.